That Storm trojan wave of spam I spoke of the other day (see Aug. 22, 2007 below) just keeps changing and rolling on. In its latest incarnation, it asks you to confirm your account information with a fake organization.
You are given temporary login details, and told to visit a certain web site and sign in. The web site is a numeric IP address – the “real” address – not the usual http://… you are used to seeing.
If you are foolish enough to go to the web site, it asks you to install a “secure login applet”, which is actually the Storm trojan itself. It turns your PC into a zombie that goes on to attack other computers, as part of a botnet.
The vendors of popular security programs are issuing updates as quickly as possible, but the Storm malware is changed and adapted in as little as 30 minutes.
Now more than ever, it is imperative that we all follow good defensive email practices, and keep our security programs up to date. Do not open junk emails. Just delete them.
Syd Tash is a noted computer security consultant and author of How to Protect Your Computer Online. He has been keeping Internet surfers safe and secure since the last century. Find out how he does it; protect your own computer with five layers of protection right here: =>http://mypcsecuritysite.com
You may include these Tips in your web sites and publications provided they remain unchanged and include the above paragraph, with the author’s name and web site.
